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Claims 

Please amend the claims to read as follows: 

1. (Previously presented) A method for protecting a computing device from 
potentially harmful code in a document, the method comprising: 

receiving a data structure representation of the document; 

providing one or more definitions of potentially harmful active 
content in an editable configuration file, each definition identifying 
potentially harmful active content and specifying an action to be 
performed on that potentially harmful active content if that potentially 
harmful active content is found in the document; 

dynamically editing by a user the editable configuration file by 
adding a new definition; 

parsing the editable configuration file to generate a data structure 
representation of the definitions in the editable configuration file; 

comparing the data structure representation of the document with 
the data structure representation of the definitions of potentially harmful 
active content to identify potentially harmful active content within the 
document; and 

modifying the document to render harmless any identified 
potentially harmful active content before presenting the document to the 
computing device. 

2. (Original) The method of claim 1, further comprising syntactically 
examining the document and placing the document in a valid form before 
comparing the document with each definition. 

3. (Original) The method of claim 1, further comprising transmitting the 
modified document to the computing device over a network after the 
potentially harmful active content is rendered harmless. 
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4. (Previously presented) The method of clgdm 3, wherein each definition is 
listed in the configuration file in a same language structure and schema 
as the document. 

5. (Previously presented) The method of claim 3, further comprising 
mapping each definition in the configuration file into a same language 
and schema as the document. 

6. (Currently amended) The method of claim 1 , wherein the data structure 
representation of the document is a first document object model (DOM) 
tree and wherein the data structure representation of the on e or mor e 
definitions in the configuration file is a second DOM tree. 

7. -22. (Cancelled) 

23. (Previously presented) The method of claim 1, wherein the editable 
configuration file is an XML (extensible markup language) file. 

24. (Previously presented) The method of claim 1, wherein one or more of the 
definitions of potentially harmful active content identifies potentially 
harmful active content at a level of a tag in the document. 

25. (Previously presented) The method of claim 1, wherein one or more of the 
definitions of potentially harmful active content identifies potentially 
harmful active content at a level of an attribute in the document. 

26. (Previously presented) The method of claim 1 , wherein one or more of the 
definitions of potentially harmful active content identifies potentially 
harmful active content at a level of an attribute value in the document. 
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27. (Previously presented) The method of claim 1, wherein each definition is 
listed in the configuration file in a different language structure and 
different schema from the document. 

28. (Previously presented) The method of claim 1, wherein the action 
specified by a given definition is to remove an attribute from the 
document. 

29. (Previously presented) The method of claim 1 , wherein the action 
specified by a given definition is to replace the identified potentially 
hamiful active content in the document with active content known to be 
harmless. 

30. (Previously presented) The method of claim 1, wherein the action 
specified by a given definition is to remove a tag from the document. 

31. (Currently amended) The method of claim 1, further comprising 
identifying potentially harmful active content by finding a node in the 
data structure representation of the on e or mor e definitions that matches 
a node in the data structure representation of the document. 



